30 open-source projects similar to xvzc/spoofdpi, ranked by shared indexed features. Tags may describe platforms or build tools rather than the same primary purpose. Check each project’s use case, license, and deployment requirements before treating it as a replacement.
REALITY is a censorship circumvention tool and network traffic obfuscator designed to bypass internet filters. It functions as a secure tunneling protocol that masks connection patterns and identity by mimicking the TLS handshakes of legitimate target websites. The system removes server-side TLS fingerprints to hide encrypted traffic from network monitoring tools and deep packet inspection. It employs a website mimicking proxy to present valid handshakes and forward traffic to destination servers, masquerading the connection as a legitimate site visit. The project incorporates a quantum-resi
Zapret is a deep packet inspection bypass tool and packet manipulation framework designed to circumvent network censorship. It operates as a transparent network proxy and TCP traffic obfuscator that modifies packets to deceive network inspection systems. The project distinguishes itself through advanced desynchronization strategies, including the modification of TLS client hello handshakes and the use of fake packet injection. It utilizes a combination of TCP stream segmentation, sequence overlapping, and TTL adjustment to hide prohibited requests from firewalls while ensuring the destination
GoodbyeDPI is a censorship circumvention utility designed to bypass deep packet inspection and restrictive network filtering. It functions as a background engine that intercepts and modifies network traffic at the kernel level, allowing users to maintain connectivity in environments where specific protocols or web content are blocked. The tool employs active manipulation techniques to confuse inspection hardware, including TCP stream fragmentation, HTTP header obfuscation, and the injection of out-of-order packets. By altering packet structures and dropping specific redirection patterns, it m
GreenTunnel is a network utility designed to circumvent deep packet inspection and bypass internet censorship. It functions as a tool that modifies outgoing network packets and encrypts DNS lookups to prevent internet service providers and network filtering systems from detecting and blocking specific web destinations. The project implements an HTTP fragmentation proxy and an HTTPS handshake fragmenter. These components split request headers and TLS handshake records across multiple segments to conceal hostnames and destination server names from inspection systems. The software also includes
This project is a censorship circumvention tool and transparent proxy gateway designed to bypass local network restrictions. It functions as a SOCKS5 proxy server, a DNS tunneling tool, and a network traffic obfuscator to help users access blocked websites. The software implements masking protocols to hide the origin and destination of data to evade restrictive firewalls. It provides capabilities for network traffic obfuscation and secure DNS tunneling to protect network privacy and resolve blocked domains. The system handles wide-scale traffic management by intercepting system network traff
Trojan is a censorship circumvention tool and TLS proxy server designed to bypass network restrictions by imitating legitimate web services. It functions as a TLS traffic obfuscator that masks proxy activity by mimicking the handshake and data flow of standard HTTPS requests. The system disguises network traffic as common web browsing to avoid deep packet inspection. It achieves this by wrapping TCP and UDP data within TLS encryption and forwarding unauthenticated or unauthorized requests to a legitimate destination website to hide the proxy's purpose. The project provides a tunnel that conv
Unblock-Youku is a geo-blocking circumvention tool and proxy server designed to grant access to region-locked video streaming and web services. It functions as a regional content unblocker that masks a user's location to bypass geographic restrictions. The system operates as an SNI proxy server, forwarding HTTPS traffic based on the Server Name Indication without decrypting the payload. It also serves as a transparent proxy gateway and a DNS-based request router that directs network traffic to specific proxy servers by modifying name resolution records for regional domains. Its capabilities
UnblockNeteaseMusic is a network gateway and proxy server designed to restore playback for unavailable songs on Netease Cloud Music. It functions as an HTTP traffic proxy that intercepts requests to unlock restricted digital content and bypass regional availability limits. The project acts as a regional content gateway, using custom IP parameters and request rerouting to bypass geographic blocks. It restores access to restricted tracks by diverting network traffic from official servers to alternative music sources. The server manages network traffic routing through domain-based routing and U
This project is a technical resource and guide for bypassing internet censorship and network restrictions. It provides instructional documentation for configuring proxies and tunnels to circumvent IP blocking and access restricted websites and services. The guides cover the deployment of Shadowsocks, L2TP/IPSec, and SSH tunnels on virtual private servers. It focuses on masking server IP addresses by routing traffic through content delivery networks and using WebSockets to maintain connectivity. Additional technical coverage includes the implementation of SOCKS5 and HTTP proxies, the configur
This project is a performance benchmarking framework and network protocol stress tester designed to evaluate system stability under high-concurrency conditions. It functions as a command-line utility that simulates massive volumes of simultaneous requests to identify infrastructure bottlenecks and verify service reliability. The tool distinguishes itself through its protocol-agnostic orchestration, which allows for load testing across diverse standards including HTTP, WebSocket, gRPC, and Radius. It supports complex request configurations, enabling users to inject custom headers, binary data,
This project is a technical programming guide and educational resource focused on Go internals, runtime mechanisms, and advanced language features. It provides detailed conceptual analysis of the language's execution model, including its scheduler, memory escape analysis, and garbage collection mechanisms. The material distinguishes itself through deep dives into high-concurrency system design, exploring the implementation of worker pools and communication channels. It also covers low-level network programming with a focus on I/O multiplexing and TCP state management, alongside a study of dis
Mitmproxy is an interactive, programmable network proxy engine designed for traffic analysis and protocol manipulation. It functions as a gateway that intercepts, inspects, and modifies network traffic in real-time, supporting HTTP, HTTPS, WebSocket, DNS, and generic TCP or UDP streams. By acting as a trusted certificate authority, the proxy can dynamically generate and sign certificates to decrypt and analyze secure TLS-encrypted connections. The project distinguishes itself through a highly extensible, event-driven architecture that allows users to automate traffic transformation using cust
This repository serves as a comprehensive collection of configuration templates, deployment scripts, and technical documentation for establishing secure, obfuscated network tunnels. It provides a centralized resource for users to implement advanced proxy services, focusing on the practical application of structured configuration schemas to manage complex traffic routing and protocol settings across diverse environments. The project distinguishes itself by offering a library of standardized templates for high-performance and censorship-resistant protocols. It covers a wide range of tunneling m
Zen Desktop is a cross-platform proxy client and network request filter for Windows, macOS, and Linux. It functions as a system-wide ad blocker and privacy protection tool that intercepts network traffic across all operating system applications to block advertisements, trackers, and malware. The software employs a network request filtering system that modifies HTTP headers and prunes JSON data using custom rules and regular expressions. It specifically removes tracking parameters and sanitizes network headers to prevent activity monitoring. The project provides capabilities for blocklist man
Firefly-proxy is a censorship circumvention proxy and network traffic obfuscator designed to bypass national firewalls and regional internet blocks. It functions as a SOCKS5 proxy server that routes traffic through obfuscated tunnels to provide secure web access. The project implements transport-layer obfuscation and TCP-stream encryption to mask network traffic patterns and evade detection by deep packet inspection systems. It utilizes remote peer tunneling to establish encrypted connections between local clients and foreign servers. The system supports general network traffic proxying via
proxy.py is a lightweight, dependency-free HTTP and reverse proxy framework built in Python that handles network traffic through asynchronous event loops and multi-core connection distribution. It acts as a customizable proxy server and embedded web server, allowing developers to inspect, route, and modify web traffic programmatically or via command-line execution wrappers. The platform provides in-flight TLS interception and traffic decryption using generated root certificates, alongside modular extension hooks that support custom dashboard interfaces, request handling plugins, and REST API
Hetty is an HTTP intercepting proxy and web security research toolkit used to capture, inspect, and modify traffic between a browser and a server. It functions as an HTTP request editor for creating and replaying manual requests to test server behavior and as a project-based traffic logger that isolates network logs across different security research engagements. The tool provides a request-response interception loop that pauses outgoing requests and incoming responses in transit, allowing for manual editing or cancellation. It includes a manual request replay engine to construct and transmit
This project is a comprehensive technical manual and reference guide focused on network proxies, virtual private networks, and the circumvention of internet censorship. It provides detailed analysis of network censorship and firewall strategies, including port blocking, DNS poisoning, and SSL connection interception. The documentation explains the underlying mechanics of VPN protocols, tunnels, and proxy systems to clarify how data routing and connectivity function. It includes instructional content for configuring proxy software and resolving DNS certificate errors across Windows, macOS, and
This project is a GitHub-based discussion forum and community platform designed for developers and researchers to exchange techniques for bypassing network blocks and filters. It serves as a multilingual technical forum dedicated to coordinating information sharing and research on internet censorship circumvention. The platform utilizes GitHub issues as its primary threading model and employs Git for state persistence. This allows for open source collaboration and the exchange of specialized knowledge across different languages to maintain access to the open internet. The system supports tec
This project is a CDN binary distribution system and cross-platform installer portal. It serves as a distribution point and web interface for downloading versioned binaries, specifically focusing on VPN clients and networking software designed for internet censorship circumvention and network proxy setup. The system uses client-side metadata resolution to analyze browser agents and operating systems, mapping user device profiles to the correct software build. It employs platform-specific routing to direct users to dedicated download endpoints for mobile or desktop environments. Binary delive
The Tor Project is a distributed anonymity network that routes internet traffic through a system of volunteer relays using multi-layered encryption to conceal the identity and location of the user. The system provides tools for network censorship circumvention, utilizing bridges and pluggable transports to bypass internet blocks and obfuscate traffic patterns. It also enables onion service hosting, allowing websites and services to be published such that they are reachable only through the network, concealing the physical location of the server. The project covers broader privacy and infrast
This project is a censorship circumvention utility designed to maintain connectivity to restricted online services by evading deep packet inspection. It functions as a network traffic redirection service that manipulates packet headers at the transport layer to bypass regional network filters and censorship systems. The tool distinguishes itself by providing granular control over traffic management, allowing users to define specific lists of domains and IP addresses for targeted interception. By applying custom bypass strategies only to these designated hosts, the utility ensures that the rem
AndroidHttpCapture is a mobile application for intercepting and analyzing HTTP and HTTPS network traffic directly on an Android device. It functions as a local proxy server and traffic interceptor to capture and monitor requests and responses from other installed mobile applications. The tool provides capabilities for MITM HTTPS decryption through root certificate installation and supports exporting captured network sessions as HAR files for external analysis. It allows for real-time response body injection and the modification of request headers via user agent spoofing. The project includes
cursor-vip is a modification layer and local network utility designed to unlock premium AI prompting and editor features within a specific AI-powered code editor. It functions as an LLM IDE feature unlocker that bypasses authentication requirements to provide unrestricted access to advanced model prompts. The project employs a local proxy service to intercept and modify network requests, using header injection and local API mocking to simulate valid premium sessions. These mechanisms allow the editor to access restricted tools and services without standard login constraints. The system manag
dolby_beta is an audio content unblocker and music source proxy tool designed to route restricted audio streams through proxy servers. It functions as a music stream redirector that replaces original media URLs with proxy addresses to enable the playback of unavailable tracks. The project is implemented as an Xposed module, allowing it to modify application behavior at the system level during runtime. It uses the Xposed framework to hook into the Android operating system and modify music application behavior without altering the original app binary. The utility handles audio source intercept
This project provides an iOS app ad-blocking ruleset, consisting of network traffic filter lists and proxy-based content filters. It functions as a collection of rewrite rules and scripts designed to intercept and modify network requests to remove advertisements from mobile applications. The system utilizes HTTP response modification scripts to alter the bodies of network responses. Beyond ad blocking, these scripts enable in-app content translation, such as providing translated song lyrics within music applications. The ruleset employs a pattern-matching engine using regular expressions and
This project is a collection of Python implementations for web scraping, network traffic interception, data analysis, and sentiment analysis. It provides methods for extracting structured data from websites and mobile application interfaces. The collection includes tools for capturing and analyzing network packets from mobile applications to identify hidden internal API endpoints. It also features scripts for evaluating the emotional tone and public perception of text data. The project covers data manipulation and transformation of large datasets, as well as the generation of charts and grap
CocoaDebug is a debugging framework for iOS that provides a toolkit for inspecting application logs, network traffic, and sandbox files directly on a device. It functions as a suite of specialized tools for auditing device hardware, monitoring performance, and inspecting network activity. The framework includes an on-device network inspector for capturing and filtering HTTP requests and payloads, as well as a sandbox file manager to list and modify files and folders within the application container. It further provides a device auditor to display system build versions and hardware details for
BPB-Worker-Panel is a control panel designed for deploying and managing VLESS and Trojan proxies hosted on Cloudflare Workers. It functions as a proxy subscription generator and a manager for secure DNS over HTTPS servers and WireGuard configuration provisioning. The project distinguishes itself through network traffic obfuscation capabilities, utilizing packet fragmentation and SNI spoofing to evade detection. It provides specialized administration for Cloudflare Warp and Warp Pro connections, including the ability to optimize endpoints and export WireGuard configurations. The system covers
gost is a multi-protocol proxy tunnel and secure tunneling server designed to route network traffic through encrypted connections. It functions as a traffic obfuscation gateway and a transparent proxy server capable of intercepting TCP and UDP traffic at the IP level. The project also includes a virtual network interface manager for creating TUN and TAP devices to intercept operating system packets. The system distinguishes itself through a chain-based request routing model, allowing traffic to pass through an ordered sequence of proxy nodes. It provides extensive transport-layer encapsulatio